Top open source PyPI package with over 1 million downloads each month hacked to send out malware

Date:
Tue, 28 Apr 2026 14:10:00 +0000

Description:
This was not a case of stolen credentials, but rather of vulnerability exploitation.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter A widely used PyPI package was recently compromised through a malicious update The attack leveraged a GitHub Actions workflow to push infostealer code into a release Maintainers quickly issued a clean version, rotated credentials, and began an external investigation A popular Python Package Index (PyPI) package has been compromised and used to deliver malware to its users, experts have warned.

A user recently warned maintainers of the Elementary package that the newest version, 0.23.3, contained malicious base64 encoded code. The maintainers
soon responded, confirming the news, releasing a clean update (0.23.4), and notifying other users. The elementary-data package is an open source data observability tool for Data Build Tool (dbt). It is used mostly by data engineers and analytics engineers working with data pipelines, and
apparently, it is rather popular in the dbt ecosystem, with more than a million monthly downloads on PyPI. Article continues below You may like Top LLM PyPl package compromised to steal user details - here's what we know
Major compromise of the telnyx PyPI library could put millions of users at risk Dangerous new malware targets macOS devices via OpenVSX extensions - here's how to stay safe Deploying an infostealer An attacker opened a PR with malicious code and exploited a script-injection vulnerability in one of our GitHub Actions workflows to publish it as release 0.23.3, the maintainers explained. Users who ran 0.23.3, or who pulled and ran the affected Docker image, should assume that any credentials accessible to the environment where it ran may have been exposed.

It was also confirmed that Elementary Cloud and the Elementary dbt package were not affected, and neither were other versions of the CLI.

The malicious code acted as an infostealer , grabbing SSH keys, Git credentials, cloud credentials, various secrets (Kubernetes, Docker, CI), cryptocurrency wallet files, system data, and .env files and developer
tokens.

The maintainers added that the payload also reached the projects Docker image since the release package workflow that uploads to PyPi also pushes to
Docker. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Besides releasing a clean version, the Elementary team also rotated the PyPI publish token, GitHub token, Docker registry credentials, and other secrets. The vulnerable GitHub Action workflow was also removed, while other workflows were thoroughly audited.

Wiz was also brought in to investigate and fortify Elementarys defenses. So far, no one has claimed responsibility for the attack.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/top-open-source-pypi-package-with-over- 1-million-downloads-each-month-hacked-to-send-out-malware


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)